Scammers sent fake pension APK file on WhatsApp; extracted bank details and emptied account overnight. Cyber Cell freezes suspect’s account
Meerut – A resident of Meerut has fallen victim to an elaborate cyber fraud in which scammers duped him of ₹5.46 lakh by sending a fake pension update link. The incident took place in Sainik Vihar Colony under the Kankarkheda police station area, where Manoj Kumar was targeted using a deceptive WhatsApp message disguised as a Pension Life Certificate update.
According to the complaint filed with the Cyber Cell, the fraudsters sent Manoj a malicious APK file titled “PNB Pension Life Certificate.apk”. Once installed, the file allowed the criminals to steal his confidential banking credentials and drain his account through multiple late-night transactions.
Fraud began with a fake verification call, followed by a suspicious WhatsApp file
Manoj Kumar stated in his complaint that the fraud began on November 26 when he received a phone call from an unknown individual claiming to be an officer from Punjab National Bank. The caller informed him that his Pension Life Certificate was not updated and warned that his pension could be suspended if he failed to update it immediately.
Minutes later, Manoj received a WhatsApp message from a different number, containing an APK file supposedly meant for pension verification.
The caller guided him step-by-step, instructing him to install the file and submit his bank account details, debit card number, expiry date, CVV, and OTP “for verification.” Fearing disruption in pension payments, Manoj followed the instructions and unknowingly handed over complete access to his bank account.
Money siphoned off through multiple transactions until 11 PM
Manoj later discovered that within hours of installing the file, the scammers executed several transactions from late night on November 26 to around 11 PM. The fraudsters systematically transferred ₹5.46 lakh from his bank account to various receivers.
Shockingly, Manoj did not receive any SMS alerts for these transactions—indicating that the APK file may have granted remote control or suppressed banking notifications on his phone.
Victim approaches Cyber Cell; investigation begins
The next morning, when Manoj noticed the unusually low balance in his bank account, he realised he had been cheated. He immediately visited the Cyber Cell police station and submitted a written complaint with all supporting details.
Acting swiftly, the Cyber Cell registered an FIR, pulled transaction logs, and began tracking the accounts where the money had been transferred.
One suspect account frozen; efforts underway to recover funds
Cyber Cell Station In-charge Satyaprakash confirmed the developments:
“We have registered the case based on the victim’s complaint. One of the primary beneficiary accounts has been frozen. Efforts to recover the siphoned amount are in progress, and identification of the accused is underway.”
He added that the region has seen a sharp spike in frauds involving malicious APK files, fake KYC updates, pension verification scams, and false bank blocking alerts.
Experts warn: Never install APKs or share banking credentials
Cybersecurity professionals have urged citizens to remain cautious:
- Never download APK files received via WhatsApp or unknown links.
- Banks do not ask for OTP, CVV, or full debit card details on calls.
- Always verify suspicious calls by contacting your branch or official bank helpline.
- Avoid installing any app received through messaging platforms, especially those claiming to be from banks or government agencies.
